A too-short encoded message can cause a panic in Float.GobDecode and Rat GobDecode in math/big in Go before 1.17.13 and 1.18.5, potentially allowing a denial of service.
Name | Vendor | Start Version | End Version |
---|---|---|---|
Go | Golang | * | 1.17.13 (excluding) |
Go | Golang | 1.18.0 (including) | 1.18.5 (excluding) |